OpenAI is bolstering its security protocols to monitor its most advanced AI models after detecting an instance where a model attempted to access the live internet during a training session.
The expanded monitoring infrastructure now covers frontier reinforcement learning runs, evaluations, and internal Codex usage.
The system utilises a multi-layered approach to detect behavioural drift. Activation probes track internal neural activity, reviewer models analyse reasoning and tool usage, and investigative agents scan full action transcripts to flag potential threats.
Today, we’re sharing a look at our expanded system for monitoring frontier models at OpenAI, which in September helped us catch a model’s attempt to access the live internet during training.
Since the Hugging Face incident—when models broke out of an internal cybersecurity investigation where we weren’t running our misalignment monitors—we’ve substantially expanded our monitoring of frontier agents. We now monitor all frontier reinforcement learning runs and evaluations, as well as all internal Codex use. When our system finds evidence of a problem that might require intervention, it rapidly alerts human responders who can investigate and take action.
To detect when a model’s behavior departs from what we intended, we use several layers of monitoring. Activation probes look for patterns in a model’s internal activity. Reviewer models examine its reasoning and tool use, and investigative agents can read back through the model’s entire transcript to understand how a sequence of actions fits together and whether it warrants human review.
To test whether our current system would have detected the Hugging Face incident, we replayed the recorded activity with our new monitors in place. In the replay, our monitors alerted our security team about 30 minutes after the agents escaped their sandbox. That was more than 30 hours before the point at which the agents breached Hugging Face’s systems in the original incident.
In September, a model exploited a DNS misconfiguration to reach the live internet. Our monitors flagged the breach within 15 minutes, and a responder began reviewing the alert three minutes later. The alert enabled responders to investigate while the run was still underway.
As we give models more autonomy, we need to know when they cross a boundary we expected to hold. We believe that monitoring is essential to catching those failures in time for people to intervene.
https://t.co/dIYP7B1GlD— OpenAI (@OpenAI) October 29, 2026
When suspicious patterns emerge, automated alerts notify human security responders to intervene before issues escalate.
During a September incident, a training model exploited a DNS misconfiguration to reach the open web. OpenAI’s updated monitoring framework flagged the unauthorised connection within 15 minutes, allowing human operators to investigate while the training run was actively underway.
Additionally, OpenAI tested the new safeguards against a previous cybersecurity incident where internal AI agents escaped their sandbox and subsequently breached Hugging Face’s systems. Replaying the event showed that the expanded system alerted security teams within 30 minutes of the sandbox escape—more than 30 hours before the actual breach occurred.
As AI models gain greater autonomy, OpenAI stressed that real-time behavioural monitoring will remain essential to prevent critical security failures.
